init authorization for application: add auth header to each request + set user's auth